Privacy Policy

Last updated: May 21, 2026

This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding it. It applies to the Workplane service available at workplane.co (the "Service").

1. Who we are

The Service is operated by Tweezers Hands Ltd., an Israeli private limited company (Company No. 516679156) ("Workplane", "we", "us"). We are the data controller for personal information processed through the Service.

Contact for any privacy matter, including requests from users in the European Union or United Kingdom: help@workplane.co.

2. What we collect

Account information. When you sign in with Google, we receive your name, email address, profile picture, and a Google account identifier. We use this to create and authenticate your account.

Content you upload. Files, project metadata, tags, comments, and any other material you create or upload to the Service ("Your Content"). We store this on our infrastructure so we can show it back to you and to people you share it with.

Usage data. Basic logs about how you interact with the Service: pages visited, actions taken, timestamps, IP address, browser/device information, and error reports. We use this to operate, debug, and improve the Service.

Cookies and local storage. We use cookies and browser local storage only as needed to keep you signed in and remember preferences (essential cookies). We do not use third-party advertising cookies or cross-site tracking.

We do not intentionally collect special categories of personal data (health, biometric, political opinions, etc.). Don't upload such data to the Service.

3. How we use your information and our legal bases

We process personal information for the following purposes. Where GDPR applies, the legal basis is shown in parentheses:

• To provide the Service — authenticate you, store and serve Your Content, render the UI (performance of a contract)
• To communicate with you — respond to support requests, send security and service notifications (performance of a contract; legitimate interest)
• To improve the Service — analyze aggregated usage to fix bugs and prioritize features (legitimate interest)
• To comply with the law — respond to lawful requests, enforce our Terms, prevent abuse (legal obligation; legitimate interest)

We will not use Your Content to train AI models without your explicit consent, and we will never sell access to Your Content for any third party's model training. If we ever offer optional training features, they will be opt-in and clearly labeled.

We do not sell or rent your personal information to anyone, ever.

4. Who we share data with (sub-processors)

We use the following service providers to run the Service. Each only receives the data needed for its function:

The current list of named vendors behind each category is available on request to help@workplane.co.

Sub-processor changes. We may add or change sub-processors over time. We will update this list and, where the change materially affects how your data is processed, notify you through the Service or by email at least 30 days before the change takes effect. You may stop using the Service if you object to the change.

We don't share your data with anyone else except: (a) when you direct us to (e.g., by sharing a project publicly or with a specific user), (b) to comply with a valid legal request, or (c) in connection with a merger, acquisition, or sale of assets, in which case we'll notify you.

5. Where your data is stored

Your data is stored on infrastructure operated by the providers listed above, primarily in the European Union and the United States. By using the Service, you understand that your data may be transferred to and processed in countries other than your own. Where required, we rely on appropriate transfer mechanisms — such as the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

6. How long we keep it

• Account data and Your Content: for as long as your account is active
• After account deletion: removed from our active systems within 30 days; backups containing the data are overwritten on a rolling basis (typically within 90 days)
• Logs and usage data: typically retained for up to 12 months

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export Your Content in a portable format
• Object to or restrict certain processing
• Withdraw consent where we rely on it
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email help@workplane.co. We'll respond within 30 days.

8. Notice for California residents

If you are a California resident, the CCPA/CPRA gives you additional rights regarding personal information.

Categories of personal information we collect (using CCPA categories): identifiers (name, email, account ID, IP address), internet/network activity (usage logs), and inferences drawn from the above. We collect this from you directly and from Google when you sign in.

Purposes: as described in Section 3 above.

Sale or sharing for cross-context behavioral advertising: we do not sell personal information, and we do not share it for cross-context behavioral advertising. You do not need to opt out, because we never opted in.

Your CCPA rights: to know, delete, correct, and to non-discrimination for exercising these rights. To exercise, email help@workplane.co.

9. Security

We use industry-standard measures to protect your data: encrypted connections (HTTPS), encrypted storage at rest via our infrastructure providers, access controls, and authentication via Google OAuth. However, no system is 100% secure. As the Terms of Service make clear, you use the Service at your own risk and should not upload information you can't afford to lose or have exposed.

If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

10. Children

The Service is not directed to children under 13 (or 16 in the EU). We don't knowingly collect personal information from them. If you believe a child has provided us personal information, contact help@workplane.co and we will delete it.

11. Our promises

These commitments go beyond what the law requires:

• We will never sell your personal data.
• We will not use Your Content to train AI models without your explicit consent.
• We will never read Your Content except as needed to operate the Service, respond to your support requests, or comply with the law.

12. Changes to this policy

If we make material changes to this policy, we will notify you through the Service or by email at least 30 days before the changes take effect. The "Last updated" date above always reflects the current version.

13. Contact

Questions, requests, or complaints about your privacy? Email help@workplane.co. We read every message.